IT Security Consultant

Optimum SolutionsSingaporemycareersfuturepublished 10/20/2026

Must-have:AzureCloudSecurity

Vulnerability Management

Coordinate vulnerability management activities across on-premises infrastructure, servers, endpoints, applications, and Azure cloud environments.
Utilize security tools such as Vulnerability Management Systems (VMS), TenableOne, Cloudscape, and related platforms to identify, assess, and monitor security vulnerabilities.
Conduct regular reviews of vulnerability assessment results and patch compliance reports to identify remediation priorities.
Coordinate periodic status updates and remediation tracking exercises with infrastructure, application, and support teams.
Monitor patching progress and ensure vulnerabilities are remediated within defined timelines and compliance requirements.
Track and manage outstanding vulnerabilities, risk acceptance requests, and remediation exceptions.
Analyse vulnerability data to identify trends, recurring issues, and areas requiring additional attention.
Escalate overdue or high-risk vulnerabilities to relevant stakeholders and management.
Support security audits, compliance assessments, and reporting activities by providing required vulnerability management evidence and documentation.
Ensure remediation activities comply with IM8 requirements, internal policies, and cybersecurity standards.

Security Incident Response Support

Support cybersecurity incident response activities in collaboration with the CISO, Infrastructure Team, and security service providers.
Coordinate incident investigations and facilitate communications among relevant technical and business stakeholders.
Assist in the identification, escalation, containment, recovery, and closure of cybersecurity incidents.
Maintain accurate incident records, logs, and supporting documentation.
Follow up on remediation activities arising from security incidents and ensure completion within agreed timelines.
Participate in incident review sessions and support the implementation of lessons learned and process improvements.
Monitor incident trends and recommend operational improvements to enhance security effectiveness.
Ensure incident management processes are executed in accordance with established security procedures and governance requirements.

DDoS and Web Application Firewall (WAF) Operations

Support the operation and administration of DDoS mitigation and Web Application Firewall (WAF) services protecting the organization's Internet-facing applications.
Coordinate with service providers and internal stakeholders to ensure the effectiveness of deployed security controls.
Review security alerts, attack reports, and service performance metrics to identify potential risks and improvement opportunities.
Facilitate WAF policy reviews, rule updates, and change requests in accordance with operational requirements.
Support investigations involving web application attacks, suspicious traffic, and DDoS-related events.
Track service issues and follow up with vendors to ensure timely resolution.
Assist in service reviews and operational assessments of DDoS and WAF solutions.

4.Security and Infra Operations Coordination

Coordinate cybersecurity and infra operational activities across application teams, infrastructure teams, Onsite FM teams, GCC FM teams, and external security vendors.
Maintain security risk, remediation, and compliance tracking registers.
Follow up on action items arising from vulnerability assessments, incidents, audits, and service reviews.
Support security governance activities through effective communication and collaboration with stakeholders.
Escalate operational issues, delays, and security risks where required.
Ensure cybersecurity and infra operational processes are executed consistently and effectively.

Reporting and Compliance Monitoring

Collect, consolidate, and analyse vulnerability, incident, compliance, and operational security data.
Prepare regular operational reports, dashboards, and management updates on cybersecurity posture and remediation progress.
Monitor compliance against prescribed security requirements, policies, and standards.
Produce metrics and reports on vulnerability remediation, incident management, patch compliance, and security service performance.
Support management review meetings by providing timely and accurate cybersecurity status updates.
Assist in audit preparation activities and coordinate the collection of supporting evidence and documentation.

Diploma or Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.

Minimum 4-5 years of experience in IT security operations, cybersecurity operations, vulnerability management, or related IT security functions.
Experience working with vulnerability management tools such as Tenable, or equivalent solutions.
Exposure to Microsoft Azure security and cloud environments is advantageous.
Experience coordinating cybersecurity incidents and remediation activities.
Familiarity with DDoS protection and WAF technologies is preferred.
Experience supporting compliance and governance requirements within enterprise or public-sector environments is advantageous.

TechnicalKnowledge

Understanding of cybersecurity, infra operations and security monitoring practices.
Knowledge of vulnerability management and patch management processes.
Familiarity with cybersecurity frameworks and standards such as IM8, NIST, ISO 27001, CIS Controls, or equivalent.
Basic understanding of network, server, application, and cloud security concepts.
Proficiency in Microsoft Office applications, particularly Excel and PowerPoint, for reporting and analysis.

SoftSkills

Strong coordination and stakeholder management skills.
Good analytical and problem-solving capabilities.
Effective verbal and written communication skills.
Ability to work independently and collaboratively within a team environment.
Strong organizational skills with attention to detail.
Ability to manage multiple tasks and priorities in a dynamic operational environment.

Preferred Certifications